Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/aP85uQVtQdnTL49F1ZEPPWAcXxE.roa
File: aP85uQVtQdnTL49F1ZEPPWAcXxE.roa (raw, json)
Hash identifier: ymLMnjr+5g/R1uEZqxDFS3g/LJ7tq5K5Gsf4xQeaAIE=
Subject key identifier: 68:FF:39:B9:05:6D:41:D9:D3:2F:8F:45:D5:91:0F:3D:60:1C:5F:11
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B012F60D50E6BDE8EBF47666E166C337C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/aP85uQVtQdnTL49F1ZEPPWAcXxE.roa
Signing time: Thu 05 Oct 2023 18:52:44 +0000
ROA not before: Thu 05 Oct 2023 18:52:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199865
IP address blocks: 185.177.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:2f:60:d5:0e:6b:de:8e:bf:47:66:6e:16:6c:33:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 5 18:52:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68ff39b9056d41d9d32f8f45d5910f3d601c5f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:9a:ff:64:50:71:74:ce:a2:47:0e:42:73:
91:a5:37:ef:6a:b4:2d:6f:44:92:8a:dc:51:1d:0c:
48:a9:60:7c:a4:81:58:73:58:bc:ca:ad:b2:ed:4a:
68:dc:52:49:47:82:d9:f2:90:0d:ea:41:5f:91:ea:
8d:c4:37:39:b8:56:84:f2:ff:f2:9b:81:f3:1f:43:
24:5e:c9:46:14:bc:3f:7f:bc:92:5f:ca:9b:de:df:
ae:e0:9c:f9:76:63:c6:29:37:33:69:be:21:a8:cd:
51:7d:25:f0:f2:3a:7a:fd:b2:65:8a:de:88:cd:5d:
2a:f2:51:f0:0a:cf:06:a4:a6:3e:fe:68:c3:ce:d5:
f5:82:29:7e:d3:18:12:2b:c7:5e:cf:23:f4:47:fd:
d2:f7:35:d9:cd:84:89:43:3e:bc:77:61:43:c6:8a:
06:54:ee:76:b6:98:78:ab:67:dc:c0:ae:4e:d0:26:
b3:df:61:6f:1c:66:5e:e0:37:d9:0b:d0:ec:0c:b7:
e7:23:ed:69:72:36:0c:72:3e:a5:4a:83:b1:1e:d9:
b7:dc:47:66:b6:ea:67:ca:78:36:f0:20:91:74:24:
c2:7d:c2:7e:90:e6:e4:9a:20:61:b3:67:df:c6:da:
5f:9e:bf:5a:7b:0a:f8:e8:9f:14:b5:74:40:d9:81:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:39:B9:05:6D:41:D9:D3:2F:8F:45:D5:91:0F:3D:60:1C:5F:11
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/aP85uQVtQdnTL49F1ZEPPWAcXxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.25.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4c:a2:ea:6e:db:a8:8e:4e:ac:f3:57:0c:1b:8b:e2:3a:d0:
ed:8b:94:76:cd:27:54:02:de:1a:78:d9:24:ca:6e:c5:89:79:
9f:dd:8e:1a:d5:fe:e2:99:f7:30:45:11:57:33:18:b5:6c:e9:
94:e2:e4:3a:94:a3:11:8a:f2:58:d6:5a:ce:34:f4:86:6b:35:
0d:96:47:38:3b:e7:4b:31:62:97:9b:01:32:ac:59:47:e0:2d:
3f:10:3e:54:85:b8:74:23:99:40:54:2b:5a:8a:46:06:a1:37:
5d:68:3d:88:e9:63:29:3e:ce:1e:94:47:c5:a1:4d:57:b6:d7:
bb:e6:d4:91:2d:f4:05:b3:dc:cc:c4:38:f6:6a:0c:ba:6a:24:
01:9a:48:5d:9e:96:a1:e4:5f:08:9e:02:4a:26:bc:3e:ad:c1:
9b:dd:bb:71:eb:af:2c:a6:1d:ff:ef:47:31:5e:4e:c5:81:59:
6f:cc:26:46:7c:d1:21:df:78:93:61:5c:be:7f:0c:61:2c:c4:
96:06:39:cb:87:35:84:31:69:77:16:d1:ea:4a:61:cb:bb:c0:
32:0c:36:d8:89:98:7a:cc:d9:dc:40:d2:aa:e9:39:6b:69:a1:
14:18:14:95:ec:75:fe:ed:16:90:42:12:a6:67:a8:0c:24:9f:
96:36:00:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsBL2DVDmvejr9HZm4WbDN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMxMDA1MTg1MjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGZmMzliOTA1NmQ0MWQ5ZDMyZjhmNDVkNTkxMGYzZDYwMWM1ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis6a/2RQcXTOokcOQnORpTfvarQt
b0SSitxRHQxIqWB8pIFYc1i8yq2y7Upo3FJJR4LZ8pAN6kFfkeqNxDc5uFaE8v/y
m4HzH0MkXslGFLw/f7ySX8qb3t+u4Jz5dmPGKTczab4hqM1RfSXw8jp6/bJlit6I
zV0q8lHwCs8GpKY+/mjDztX1gil+0xgSK8dezyP0R/3S9zXZzYSJQz68d2FDxooG
VO52tph4q2fcwK5O0Caz32FvHGZe4DfZC9DsDLfnI+1pcjYMcj6lSoOxHtm33Edm
tupnyng28CCRdCTCfcJ+kObkmiBhs2ffxtpfnr9aewr46J8UtXRA2YEVNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGj/ObkFbUHZ0y+PRdWRDz1gHF8RMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvYVA4NXVRVnRRZG5UTDQ5RjFaRVBQV0FjWHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubEZMA0G
CSqGSIb3DQEBCwUAA4IBAQBlTKLqbtuojk6s81cMG4viOtDti5R2zSdUAt4aeNkk
ym7FiXmf3Y4a1f7imfcwRRFXMxi1bOmU4uQ6lKMRivJY1lrONPSGazUNlkc4O+dL
MWKXmwEyrFlH4C0/ED5Uhbh0I5lAVCtaikYGoTddaD2I6WMpPs4elEfFoU1Xtte7
5tSRLfQFs9zMxDj2agy6aiQBmkhdnpah5F8IngJKJrw+rcGb3btx668sph3/70cx
Xk7FgVlvzCZGfNEh33iTYVy+fwxhLMSWBjnLhzWEMWl3FtHqSmHLu8AyDDbYiZh6
zNncQNKq6TlraaEUGBSV7HX+7RaQQhKmZ6gMJJ+WNgDM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org